16
You can use curl to check https://check.torproject.org/:
curl --socks5 localhost:9050 --socks5-hostname localhost:9050 -s https://check.torproject.org/ | cat | grep -m 1 Congratulations | xargs
If everything goes well, the output will be:
Congratulations. This browser is configured to use Tor.
Getting no output (or an error) means somethings not ...
13
Install Tor package:
# apt-get install -y tor
Create different data dirs:
# mkdir /usr/local/var/lib/tor{1,2,3}
Create as many as you want(have different IP Addresses) different configuration files:
For example 3:
1st
# cat > /usr/local/etc/torrc1 << EOF
SocksPort 9051
Log notice file /usr/local/var/log/tor/notices1.log
RunAsDaemon 1
...
9
Websites can request several configuration settings from your browser in order to help them printing the best page format for you.
But by requesting your browser's specific abilities (here canvas is used for graphical rendering), websites could fingerprint your browser (if you have a unique configuration) across multiple sites.
This is related to the ...
8
There's no point to running multiple instances on a single machine. In fact, it's dangerous. If you fail to set family properly, and the IP's you've got are on different sub-nets (or the user has their torrc configured to allow multiple nodes on the same sub-net for some reason), it's possible (though not likely) that a user would build a circuit using two ...
7
With the way the Tor Browser is currently built, it ships with a dedicated profile prepared in advance. That profile cannot be shared by multiple users. Also, as there is no update mechanism currently, every upgrades mean that the profile recreated from the clean profile shipped by the Tor Browser.
The only safe solution currently is to have have each users ...
7
Short answer:
Download Tails.
Long answer that more properly answers your qustion and use case:
Once Tor is installed (I'll leave that to you; I recommend using the official Tor repos for Debian), add the following to your torrc:
AutomapHostsOnResolve 1
DNSPort 53530
TransPort 9040
If you're using selinux (I'm not familiar ...
5
Torify is a simple wrapper that attempts to find the best underlying Tor wrapper available on a system. It calls torsocks or tsocks with a tor specific configuration file.
It'll take measures to ensure that an application, which has not been designed for use with Tor (such as TorChat), will use only Tor for internet connectivity. Also ensure that there are ...
5
This is not a good idea, in theory at least. (False security as programs may leak data)
Adafruit offers a tutorial on how to do this using a Raspberry Pi running Raspbian (which is based on Debian). This should work fine on most Linux distros.
sudo apt-get install tor
Edit the tor config file by running
sudo nano /etc/tor/torrc
and copy ...
5
Multiple Tor instances are useful whenever a single one doesn't manage to fill the available bandwidth.
Try running one single instance first.
Multiple instances use separate torrc files by using the -f option.
The preferred way to do this may depend on what distribution you are running.
Regarding Debian (for which I'm no expert), a cursory glance at /etc/...
5
usewithtor is deprecated, you want to use torsocks in it's place.
Previously there were various incarnations, the commands were kept for backwards compatibility but torsocks is what torify/usewithtor have just been a wrapper around for some time now.
4
Current versions of Ubuntu (and probably other distros) use AppArmor, which can cause hard to debug error messages (e.g. Couldn't access/create private data directory despite permissions being set correctly). In order to be able to run a second Tor instance, I did:
edit /etc/apparmor.d/local/system_tor and add two rules (if you use other file names/paths ...
4
I think the easiest is to quote the wikipedia entry:
Canvas consists of a drawable region defined in HTML code with height
and width attributes. JavaScript code may access the area through a
full set of drawing functions similar to those of other common 2D
APIs, thus allowing for dynamically generated graphics. Some
anticipated uses of canvas ...
4
From the Arch Linux Wiki:
chromium --proxy-server="socks5://127.0.0.1:9050" --host-resolver-rules="MAP * 0.0.0.0 , EXCLUDE myproxy"
However as the wiki explicitly warns: this will be used for fetching http and https only, a great deal of work was put into ensuring "Proxy Obedience" in Tor Browser.
Forcing Chromium to fetch content outside of the Tor proxy ...
3
A relay requires a public IP address as it needs to accept incoming connections. As far as I can see from your routing table, your tunnel provider does not give you a public IP address. Your Tor log messages should currently contain something like:
Your server has not managed to confirm that its ORPort is reachable. Please check your firewalls, ports, ...
3
Currently the start-tor-browser script and vidalia form the Tor Browser Bundle is not prepared to pass arguments to the launched Firefox. See this part of the script (near to the end):
printf "\nLaunching Tor Browser Bundle for Linux in ${HOME}\n"
cd "${HOME}"
# XXX Someday we should pass whatever command-line arguments we got
# (probably filenames or URLs) ...
3
Took a while, but finally made it work:
Open the menu of the onion icon and click "Preferences...". In the window that opens select the "Security settings" tab. Uncheck "Don't record browsing history ... mode)" and "Restrict third party cookies ... data". In the content tab of the options window, uncheck "Block pop-up windows". Now you're all set to login to ...
3
I came across this and think that best describes the situation
https://www.propublica.org/article/meet-the-online-tracking-device-that-is-virtually-impossible-to-block
This was from https://lists.torproject.org/pipermail/tor-talk/2014-July/033969.html
3
Vidalia has been discontinued for a long time now because it has not been maintained to keep up with changes in tor. At present there is no officially recommended alternative, though I have heard some rumors about it being revived.
To answer "Is there any way to use it?" Yes of course it is possible, but you should not use it. It is discontinued for a ...
3
It is really simple.
Move file to be uploaded to
~/Tor Browser
PersistentDir/Tor Browser
These are the folders you can upload from or download to.
3
You can run any command as a different user using sudo:
sudo -u my_user tor-browser-en
If you need to use multiple commands you can do this:
sudo -u my_user sh -c "first && second"
If you want to background the application, you should not do this (it will only work as expected if you're already authenticated with sudo):
sudo -u my_user tor-...
3
From the README:
The getxbook program downloads books anonymously. Using it will still
result in your IP address being logged (use
torify to stop this)...
torify is tool that attempts to wrap your terminal command in a Tor session. There's a good tutorial on what you need to do, here. Then it's just a case of running:
torify <your_command>
3
What we can do to protect ourselves as VPN/Tor users?
Note that the attack itself is targeted at the service, not the client (I.E. tor relay, not the tor client) so there isn't much you can do. If you run a relay then patch when it's available, in the mean time Akamai suggest increasing the net.ipv4.tcp_challenge_ack_limit to a value high enough that ...
3
Personally, I think the wiki stuff is outdated and needs some kinda purge with fire.
Here's how Tails does it:
#!/bin/sh
unset http_proxy
unset HTTP_PROXY
unset https_proxy
unset HTTPS_PROXY
exec torsocks /usr/lib/wget/wget --passive-ftp "$@"
This script is set as the default wget (through dpkg-divert, so that non-torified wget would be hard to ...
3
The tl;dr is that FTP and .onion do not go well together and never will, due to how the FTP protocol works. For more details, see below.
FTP goes a little like this:
Client connects to the "command" channel.
Client logs in to the "command" channel.
Client asks for some data over the "command" channel.
If you're using Active Mode:
Client opens up a ...
3
This is a known issue: https://trac.torproject.org/projects/tor/ticket/27175
Looks like the fix will be released very soon with the next update.
2
Bootstrapping process
If all you want to do is see the bootstrapping process the easiest way would be to simply run start-tor-browser from the command line (Windows, Linux, or anything else; the example below is from a Linux system) and watch the output.
sam@stellata tor-browser_en-US $ ./start-tor-browser
Launching Tor Browser Bundle for Linux in /home/...
2
You may sign in to google+ and youtube, and comment on youtube, however, you lose anonymity as soon as you do so. In addition, you will be marked as Tor user. Once somebody is marked as Tor user it becomes easier for adversaries to test the hypothesis of if it was you who visited a particular site or wrote particular comment even if you do not sign in, that ...
2
Tor doesn't use GnuTLS, but OpenSSL. So it is not affected by this vulnerability.
You also might have heard about an attack on SSL (Triple handshake attack). Nick Mathewson wrote an analysis to tor-dev. According to him this also doesn't affect Tor.
Only top voted, non community-wiki answers of a minimum length are eligible
